BEACON

← candidates

npm @lynox-ai/core @1.9.0

score
0.6081 med
flagged 2026-06-05 05:21
signals by category
content 3 topology 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
bin_added 0.8 new bin entry: ['lynox']
script_count_spike 0.5 scripts count 0 -> 16
topology
dependency_added_unknown 0.6 12 new non-watchlisted dep(s): ['@anthropic-ai/sdk', '@huggingface/transformers', '@mozilla/readability', '@sentry/node', 'better-sqlite3'] ...

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "brandfusion"
  ],
  "versions": 28
}

Evidence (package doc at flag time)

{
  "dependencies_count": 12,
  "dist": {
    "integrity": "sha512-9eyFVZWoJUDEd0p8LClsiPqWjzWdJRgECWqSNv11EqtDRqWtUOLrXEkoZZsMa8+cdgXzsKQpKvv0EkeH2EUqVg==",
    "tarball": "https://registry.npmjs.org/@lynox-ai/core/-/core-1.9.0.tgz",
    "unpackedSize": 3360272
  },
  "dist-tags": {
    "latest": "1.9.0"
  },
  "latest_version": "1.9.0",
  "maintainers": [
    {
      "email": "rafael@brandfusion.ch",
      "name": "brandfusion"
    }
  ],
  "num_versions": 43,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/lynox-ai/lynox.git"
  },
  "scripts": {
    "bench": "vitest bench --config vitest.bench.config.ts",
    "bench:online": "vitest bench --config vitest.bench.config.ts tests/performance/online/",
    "build": "tsc",
    "coverage": "vitest run --coverage",
    "dev": "node --env-file-if-exists=.env --watch --import tsx src/index.ts",
    "lint": "eslint src/",
    "postinstall": "node -e \"const f='scripts/postinstall.cjs';require('node:fs').existsSync(f)&&require('node:child_process').spawnSync(process.execPath,[f],{stdio:'inherit'})\"",
    "prepack": "find dist -name '*.js.map' -o -name '*.d.ts.map' | xargs rm -f",
    "prepare": "lefthook install || true",
    "prepublishOnly": "npm run build",
    "security": "sh scripts/security-scan.sh && vitest run tests/security/",
    "smoke:local": "bash scripts/smoke-local.sh",
    "start": "node dist/index.js",
    "test": "vitest run",
    "test:watch": "vitest",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "bin_added": "new bin entry: ['lynox']",
    "dependency_added_unknown": "12 new non-watchlisted dep(s): ['@anthropic-ai/sdk', '@huggingface/transformers', '@mozilla/readability', '@sentry/node', 'better-sqlite3'] ...",
    "install_script_payload": "install/lifecycle script matches payload regex",
    "script_count_spike": "scripts count 0 -> 16"
  },
  "time": {
    "created": "2026-04-09T16:28:41.020Z",
    "modified": "2026-06-04T18:06:32.257Z"
  }
}